CVE-2017-18024

AvantFAX 3.3.3 has XSS via an arbitrary parameter name to the default URI, as demonstrated by a parameter whose name contains a SCRIPT element and whose value…

published January 10, 2018

CVSS
—
EPSS
5%
Percentile
91.5
In the wild
Unconfirmed
What it is

AvantFAX 3.3.3 has XSS via an arbitrary parameter name to the default URI, as demonstrated by a parameter whose name contains a SCRIPT element and whose value is 1.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04531 · 91.5th percentile
Published
2018-01-10T18:00Z
EPSS history
Timeline
  • 10 JAN 18:00Z
    AvantFAX 3.3.3 has XSS via an arbitrary parameter name to the default URI, as demonstrated by a parameter whose name contains a SCRIPT element and whose value…
    cvelistv5